Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MW7oSOTDa-Iy8PUnK3u6dE5NXXY.roa
File: MW7oSOTDa-Iy8PUnK3u6dE5NXXY.roa (raw, json)
Hash identifier: 9p8P5Qf5XaE/ALe7oVCt4AuqIno0rqJN2vlHhY6srtU=
Subject key identifier: 31:6E:E8:48:E4:C3:6B:E2:32:F0:F5:27:2B:7B:BA:74:4E:4D:5D:76
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A723A3F8E3F649A2666B58C8EF066130D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MW7oSOTDa-Iy8PUnK3u6dE5NXXY.roa
Signing time: Fri 08 Sep 2023 00:38:54 +0000
ROA not before: Fri 08 Sep 2023 00:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 185.210.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 08:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:72:3a:3f:8e:3f:64:9a:26:66:b5:8c:8e:f0:66:13:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 8 00:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=316ee848e4c36be232f0f5272b7bba744e4d5d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:2f:e5:dc:c8:25:c3:af:d5:80:4f:2c:6b:
69:33:0e:98:14:89:65:1e:ab:18:ee:f6:2e:70:1a:
84:5b:d8:4c:0f:59:9b:a4:f4:ae:f5:09:fb:5d:35:
0e:b7:7c:11:7d:d5:49:a6:15:1e:b4:56:81:fb:e2:
02:eb:bd:f7:fa:d9:d3:47:91:ce:81:f3:d0:11:11:
b7:25:46:10:4d:3f:fb:13:f2:3a:5e:6a:cf:8e:4b:
53:fa:00:4a:5d:0b:1f:05:93:6a:92:29:74:51:24:
6b:27:ab:4c:5c:12:73:2f:95:06:f2:3d:06:81:95:
a8:11:be:c5:ba:3e:11:e3:39:2a:7e:d5:89:d9:15:
95:00:9a:b6:5b:94:31:81:7f:99:af:8f:9e:29:37:
c0:5b:bc:07:2e:a6:26:95:7b:54:a8:98:ff:c8:67:
79:7c:db:28:49:ed:3f:2f:ed:b5:3a:eb:b7:39:92:
bb:e1:a6:24:d7:13:b3:88:34:eb:d5:5b:36:34:b4:
c7:fd:18:2e:7d:0e:22:69:de:ef:4a:63:28:16:92:
8b:e1:da:c9:ca:d0:87:de:e5:42:86:de:a0:75:a9:
da:d7:ce:e4:74:94:5b:b8:2b:e5:7e:85:25:9f:43:
27:50:de:3f:4e:93:61:0e:5e:8b:24:1d:06:33:71:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6E:E8:48:E4:C3:6B:E2:32:F0:F5:27:2B:7B:BA:74:4E:4D:5D:76
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/MW7oSOTDa-Iy8PUnK3u6dE5NXXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:20:11:00:cc:67:e7:d5:f2:4c:d0:02:ea:43:c9:78:64:6c:
4b:ab:07:63:93:f2:d4:cc:47:f9:f0:32:d3:7f:d0:83:78:69:
67:ca:51:cd:7d:d5:4e:ae:e7:bd:b4:e9:22:83:19:52:3a:d9:
36:cd:0a:4b:77:85:40:71:4b:2d:3e:48:40:de:1e:bf:e4:b9:
23:a2:ca:fc:4b:77:2c:a3:eb:83:aa:6d:8e:cb:3b:f2:10:ca:
03:4f:27:3e:ff:5d:ff:27:96:2f:23:ea:4d:39:a5:5d:11:e3:
29:47:22:ba:b3:d2:b1:1c:8b:b4:91:f6:6f:b8:33:a6:c6:08:
e1:f7:cb:ac:4b:f7:ad:ad:cc:20:59:69:a6:00:ee:79:a7:72:
16:bb:66:cd:78:7b:be:e2:e0:33:b7:fa:6d:2f:d6:29:86:48:
87:0f:72:0a:ea:af:5f:be:90:ae:76:91:ab:e4:c7:33:76:b7:
0f:e7:d7:3a:83:04:76:55:71:07:fc:fc:a6:2a:b7:07:c2:d3:
28:6f:e3:9b:6a:e9:0e:a4:06:be:8b:a4:62:d0:b8:35:df:41:
ac:58:ed:77:1c:af:ff:ce:82:ad:66:23:53:56:1e:09:5d:54:
5b:b6:8d:ea:96:bd:0c:e0:31:b5:3f:0e:46:45:ba:36:a3:aa:
28:ab:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org